The cryptographic algorithms required ... error - SecureClient

[grahamwarner]

Error messages, topology, running config attached. Trying to connect from PC3 to R1 via SecureClient, I am able to ping. I tried 4.10.07073 and 5.0.05040 versions of AnyConnect/SecureClient, as far as I can tell encryption and DH group shouldn't be the issue. R1 is the CA so it's signing its own cert.

IOS: Cisco IOS Software, IOSv Software (VIOS-ADVENTERPRISEK9-M), Version 15.9(3)M6, RELEASE SOFTWARE (fc1)

 

 

[grahamwarner]

ISP router config attached as well. One strange thing I noticed on R1 is that the 'IKEv2-po1' is created, but never applied anywhere:

crypto ikev2 policy IKEv2-po1

proposal IKEv2-prop1

[grahamwarner]

Seeing 'HTTP 85 HTTP/1.1 401 Unauthorized' packet in pcap.